CVE-2005-1287

HIGH 7.5CVE-2005-1287 · Published 23/04/2005 · updated 16/06/2026

In short

CVE-2005-1287 is a HIGH (CVSS 7.5) vulnerability affecting bk forum (bk dev).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bk forum bk_dev	`≤ 4`	No fix yet

Description

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.

References

marc.info
secunia.com/advisories/15072
securitytracker.com/id · Exploit
digitalparadox.org/advisories/bkdev.txt · Exploit
osvdb.org/15784
osvdb.org/15785
osvdb.org/15786
securityfocus.com/archive/1/431659/100/0/threaded
securityfocus.com/archive/1/431863/100/0/threaded

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free